github / github/gh-aw

Have "santize" mode where GitHub MCP tools box and sanitize text content according to contributor status

Open
#19,967 5 comments 0 reactions 1 assignee Claimed by @lpcox View on GitHub
enhancement mcp security
Dominant language
Go
Stars
5.1k
Forks
541
Avg merge
5h 46m
Merged PRs (30d)
760

Description

As a part of defense in depth, and as a variation on GitHub MCP lockdown mode, we should have an option to "box" or "soft label" or "spotlight" textual results returned from the GitHub MCP depending on contributor status

For example if a result is the title of an issue in a public OSS repo contributed by a non-write-contributor, it could be boxed or prefixed with text describing this, saying clearly the status of the contributor and that the content should be treated with caution.

My understanding is this will strongly encourage modern models tp treat this kind of boxed material with the protective gloves it deserves.

We should also strip all markdown comments etc from content in this mode

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.